Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ei5zvEHngvXl06eOo0SlS-7HUD4.roa
File: ei5zvEHngvXl06eOo0SlS-7HUD4.roa (raw, json)
Hash identifier: yJ9hJKmtVwAc244x9wRHUVmwv0GJeoo37xhI6vL0Jfo=
Subject key identifier: 7A:2E:73:BC:41:E7:82:F5:E5:D3:A7:8E:A3:44:A5:4B:EE:C7:50:3E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E424C113213B135837D456FFE0D2A284F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ei5zvEHngvXl06eOo0SlS-7HUD4.roa
Signing time: Fri 15 Mar 2024 13:27:45 +0000
ROA not before: Fri 15 Mar 2024 13:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.180.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 16:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:4c:11:32:13:b1:35:83:7d:45:6f:fe:0d:2a:28:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 15 13:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a2e73bc41e782f5e5d3a78ea344a54beec7503e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:9a:a1:3e:b1:e4:08:55:47:29:23:e1:5e:
d1:b4:6d:9b:ed:a3:18:7c:31:b3:96:43:06:a1:01:
bd:fb:79:85:29:01:6b:d8:d8:4c:11:e1:0c:5f:6a:
86:fc:2d:35:95:7c:9d:30:6d:9b:a6:bf:7b:0f:9f:
19:f6:1a:a0:3d:0b:34:df:55:4f:80:f2:ef:41:b3:
a8:50:8d:d8:19:81:d5:9e:a4:27:3e:3e:c1:04:48:
6e:e2:7f:9d:8b:d4:d1:91:68:ac:ad:69:18:61:8d:
3d:5b:a4:ca:a9:fc:a7:be:c8:ae:22:ff:e1:08:96:
1c:1d:a6:92:ed:4d:26:c4:02:d1:a9:8f:31:57:f3:
fe:b2:5f:14:c3:bd:92:b4:cd:62:b5:ae:72:aa:07:
ae:36:eb:87:88:6e:17:3b:14:69:cd:a5:d2:c7:5c:
77:f7:0d:de:ad:cf:09:be:ac:13:b4:e3:52:09:b6:
59:26:e3:c6:97:7f:be:0d:f8:b0:46:6a:99:aa:ab:
53:45:66:48:c9:47:2b:31:38:d0:ef:71:7d:aa:e7:
08:af:5f:a4:19:a4:93:ab:e3:57:0b:87:1f:27:f3:
c5:3d:f9:2c:d6:af:18:b1:3f:41:09:d3:be:97:5a:
e9:0d:db:4f:fe:3d:bc:aa:9f:d2:ad:f0:71:2f:cb:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2E:73:BC:41:E7:82:F5:E5:D3:A7:8E:A3:44:A5:4B:EE:C7:50:3E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ei5zvEHngvXl06eOo0SlS-7HUD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
89.34.106.0/24
91.132.50.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
81:92:2a:9f:fd:0a:6e:e6:7c:54:3d:d9:96:67:22:cd:a2:1c:
42:e4:95:68:40:f5:ee:f5:a0:57:4b:0b:65:99:f6:5a:22:eb:
9c:45:62:e9:95:52:28:96:93:ec:87:7f:f0:d9:f1:17:54:9c:
95:7c:58:2f:15:c6:fb:ce:34:e5:67:9a:de:8d:32:d8:a9:ea:
29:db:cb:a5:ef:93:3c:99:e1:05:2d:b3:82:f1:d5:6c:f3:56:
dd:a1:45:5d:f4:7f:a7:f0:96:0c:a2:a4:c4:8f:18:cc:17:06:
a2:86:65:28:32:b7:7d:92:d0:8f:ef:52:20:48:26:06:8c:f0:
a4:26:c4:e5:ec:3e:45:a7:cb:41:76:0c:8a:bb:f2:a8:f5:cc:
54:24:1b:d0:aa:58:e9:8d:88:24:d3:f7:ea:6d:87:65:99:26:
d9:f9:5d:8a:ac:1e:0e:2b:f1:f3:5b:7e:76:ed:2e:d0:a9:c4:
c9:2f:2c:cd:b1:58:b2:26:17:e1:85:f9:7a:12:db:d0:54:bf:
f6:e9:cf:17:b1:41:9e:e5:79:21:23:f8:9f:c3:e9:af:02:f7:
37:7c:87:94:58:4d:a0:34:bd:44:42:c0:bb:19:a8:f7:bc:25:
87:46:48:ce:00:fc:44:bc:69:44:fb:09:eb:1d:fa:60:3d:d8:
04:12:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org